MSN Messenger Virus BR2002
By Jian Shuo Wang on 2002-10-09 23:04 · MSNAt 1:40 PM, Beijing time (+8), I received a message from
Hey!! Could you please check out this program for me? I made it myself and want people to test it. Its a readme with the program that explains what it does! http://home.no.net/downl0ad/BR2002.exe <– There you can download it! give me advices on what to upgrade please!!
Do not click on the link!
If you click and open the EXE, you will send a message to each contact in your contact list, asking them to click it as you did. It is very dangerous. I don’t know what the EXE will do on your disk.
I will keep an eye on this issue.
197 Comments
By the way, why your weblog are in English instead of Chinese?
Regarding your quesiton about language this blog is using, it is an FAQ. I enjoy sharing ideas and though with people anywhere in this world. Language is only the tool. We are reading internationally, we are talking about events that happens internationally - like this virus, I need to be able to read and UNDERSTOOD by other people. I have been referenced to Norwaign blogs but I cannot read - what a feeling that I can not read while I really interested in the idea behind the Norwaign characters?
For blog entries, it seems MovableType can support Chinese character in its body, but not title. It will encode the title for the second time based on the garbage codes so make it totally unreadable.
The problem can be easily fixed using the steps outlined below:
http://www.movabletype.org/cgi-bin/ikonboard/ikonboard.cgi?s=3dae672846dbffff;act=ST;f=14;t=8744;hl=charset
I didn't give it a try yet, but it should work.
Jian Shuo Wang
It seems life in China could be splendid as well, after hard working and strong self-discipline. It is good that one can enjoy his work, :)
As for the above-mentioned virus, it could be programmed easily, as there are already documents and sample programs to manipulate MSN Messenger objects, even from Windows Host Scripts, I think.
Have a nice day!
regards,
fervvac
China is becoming better, and Shanghai is even better during the recent years. It is also good.
Yes. It is very easy to build a script to control the messenger. It is easy but now it seems dangerous. I believe the reason why MSN Messenger team exposes this interface is because of the Microsoft tradition - to build a platform to make the developers' work easier instead of creating an application. This has been clearly demostrated during the IE vs Navigator war.
download this, http://219.88.51.165:8180
and other ones do any of you know how to get rid of it without rebooting my pc
sunflower
http://www.giantcompany.com/(ftjiiern2fcwbzrtnvxiazjq)/download.aspx?prodID=70&skip=true
and download this FREE trial program. it'll remove the virus from their pc
P.S
Make sure they CLOSE msn messenger when running the program
Im just pre-warning u!
Thanx, Sarah
Appreciate your earliest reply & help by return..
"Unfortunately, that means that your friends must have the Fun Buddy Icons software in order to see your smileys.
To facilitate this, we periodically include a link to the Fun Buddy Icons download page when you send messages to
people who have not yet downloaded Fun Buddy Icons."
You can read more about that here:
http://help.funbuddyicons.com/msnim.html
Regards,
Timothy
Symantec released an update on this worm on the 22nd of February 2005.
You can read about this worm and download a removal tool if you find you are infected with it here:
http://securityresponse.symantec.com/avcenter/venc/data/w32.bropia.html
Regards,
Timothy
I have that Buddy Virus as well..Like when im chatting to somebody on MSN, that pops up and i dont even see it. I guess it asks them to take a look at something.
But recently, I can only talk to limited people..and if I stay on MSN too long my comp starts going wild and then somehow..Something sends itself to all my contacts that are online. It like opens a file and then sends to each and everyone one. But most of them decline it I think. Then after that, I can't talk to anyone in an open window.
Last night, I had this message pop up on NOTEPAD and it said something about a LARISSA and being a noob, and something about S-K-Y-D-E-V-I-L.
I have no idea who Larissa is OR Skydevil. Please give me s0me advice if you can help, this is driving me nuts.
thanks
Reply a.s.a.p
Ive had this virus for many weeks now and i can't go on msn!!
I have the SKYDEVIL virus from msn and i really want and most of all NEED to get rid of it plz help me in anyway that you can PLZ!!!!! I will be happy with any advice you have for me,so plz try to help me!!!!! Remember its the SKYDEVIL virus, its something about Larissa and i got it through msn messenger.PLEASE HELP ME!!!!!!!!!!,
and if you can THANKS A BUNCH!!!!!!
THIS VIRUS REALLY SUCKS
Nk
I want to remove it too.
Ahh I hate this stuff!! No more download exe's again. I think its time to reboot the damn hard drive again.
1) FOR HELP with the FUN BUDDY STUFF (This IS NOT THE DOWNLOAD): http://help.funbuddyicons.com/
2) THE FUN BUDDY FACT SHEET: (Stroll down to the Q's & A's that pertain to YOU)
Install & Install errors
Q: How do I install Fun Buddy Icons?
A: Installing Fun Buddy Icons is easy! Just go to http://www.funbuddyicons.com and click on the button. You will then get a Security Warning pop-up. Click "Yes". Fun Buddy Icons will then finish downloading. When installation is done, you will receive a confirmation message.
_______________________________________________________
Q: I use Norton Internet Security, Zone Alarm, or similar firewall/proxy software and am having trouble downloading Fun Buddy Icons. Why?
A:The most common problem when downloading or installing Fun Buddy Icons occurs when running such software. If you are running one of these types of products, try temporarily disabling it, then go back to www.funbuddyicons.com to try the download process again. You can reactivate your firewall/proxy software once the download and installation of Fun Buddy Icons is complete.
_______________________________________________________
Q: When I try to install, I'm told "It appears you already have Fun Buddy Icons."
Our system indicates that Fun Buddy Icons is already installed on your computer. If you have not done so already, please try restarting your computer. If you still do not see Fun Buddy Icons on your Web browser please return to www.funbuddyicons.com and try downloading again.
_______________________________________________________
Q: I am getting Error code 694031, Why?
A: You may have received this error due to insufficient hard drive space or a fragmented hard drive. You may wish to run scan disk on your hard drive to free up unallocated space and repair any disk errors.
After doing this, please try installing Fun Buddy Icons again. If you continue to receive an error, please follow the instructions below to uninstall Fun Buddy Icons with an uninstall application we have created.
1) Please click here to download the uninstall application.
2) You should be prompted to either open or save the file.
If you choose to open the file: An uninstall procedure will follow. Please select the appropriate options from the presented screen to remove this.
If you choose to save the file to your local drive: Double-click on the saved file after the download is complete. You will then be presented with the uninstall procedure. Please select the appropriate options from the presented screen to remove this.
Please note that you will continue to see the Fun Buddy Icon button on your browser until you close and reopen all instances of your Web browser.
After the uninstallation process is complete please go to www.funbuddyicons.com and install Fun Buddy Icons. If you continue to experience the same issues after having followed these instructions, please contact us.
______________________________________________________
Q: I am getting Error code 38670.Why?
A:You may have received this error due to insufficient hard drive space or a fragmented hard drive. You may wish to run scan disk on your hard drive to free up unallocated space and repair any disk errors.
After doing this, please try installing Fun Buddy Icons again. If you continue to receive an error, please follow the instructions below to uninstall Fun Buddy Icons with an uninstall application we have created.
1) Please click here to download the uninstall application.
2) You should be prompted to either open or save the file.
If you choose to open the file: An uninstall procedure will follow. Please select the appropriate options from the presented screen to remove this.
If you choose to save the file to your local drive: Double-click on the saved file after the download is complete. You will then be presented with the uninstall procedure. Please select the appropriate options from the presented screen to remove this.
Please note that you will continue to see the Fun Buddy Icons button on your browser until you close and reopen all instances of your Web browser.
After the uninstallation process is complete please go to www.funbuddyicons.com and install Fun Buddy Icons. If you continue to experience the same issues after having followed these instructions, please contact us.
_______________________________________________________
Uninstall (HERE'S WHAT WE WERE LOOKING FOR!!!)
Q: How do I uninstall Fun Buddy Icons from all my applications?
A:
1) From your computer's Start button, select "Settings", then select "Control Panel"
2) Double-click on the "Add/Remove Programs" icon
3) Select "My Web Search (Fun Buddy Icons)"
4) Click "Remove."
Fun Buddy Icons has now been uninstalled. (NOTE: Reboot system in order NOT to see FUN Buddy's Again)
_______________________________________________________
Q: How do I disable Fun Buddy Icons from individual applications?
A: From your web browser, simple:
1) Click the button located in the upper-right corner of your browser
2) Select "Enable/Disable Features" from the pull-down menu
3) Check the box next to any application you wish to enable, uncheck the box to disable
4) Click "Save Changes"
Be sure to close any applications you have open, then open for your changes to take effect.
_______________________________________________________
Q:How do I disable the feature which provides suggested search listings when I mistype or enter an incomplete word or URL into my browser?
A: From your web browser, simple:
1) Click the button located in the upper-right corner of your browser
2) Select "Enable/Disable Features" from the pull-down menu
3) Uncheck the box next to "Search Assistant" to disable
4) Click "Save Changes"
The Search Assistant feature has been disabled. Close all your browsers and open a new one for your change to take effect.
The steps above allow you to disable this feature. (You can enable it in the future by following the same steps and checking the box next to Search Assistant.) If you wish to uninstall Search Assistant from your computer, you will need to uninstall Fun Buddy Icons. To do so, please follow the steps in the question "How do I uninstall Fun Buddy Icons from all my applications" above.
_______________________________________________________
IT MAY OR MAY NOT HAPPEN TO YOU: (It didn't for me)
Uninstall Problems or Errors
Q: I tried to uninstall, but it didn't work. How do I get Fun Buddy Icons off my machine?
A: While it is unclear why you experienced difficulty uninstalling Fun Buddy Icons, we have created an uninstall application to help you remove our product from your system. To do so:
1) Please click here to download the uninstall application.
2) You should be prompted to either open or save the file.
If you choose to open the file: An uninstall procedure will follow. Please select the appropriate options from the presented screen to remove this.
If you choose to save the file to your local drive: Double-click on the saved file after the download is complete. You will then be presented with the uninstall procedure. Please select the appropriate options from the presented screen to remove this.
Please note that you will continue to see the Fun Buddy Icons button on your browser until you close and reopen all instances of your Web browser.
_______________________________________________________
Q: I'm getting a Javascript error/blank window when uninstalling.
A: This can occur if you or a program running on your computer removed a part or parts of the program by means other than the uninstall process. You may have deleted the toolbar uninstall files, so that the normal uninstall program is no longer available on your computer.
If you have experienced this problem while uninstalling, please follow the steps below to use the uninstall application we have created to help you remove our product from your system:
1) Please click here to download the uninstall application.
2) You should be prompted to either open or save the file.
If you choose to open the file: An uninstall procedure will follow. Please select the appropriate options from the presented screen to remove this.
If you choose to save the file to your local drive: Double-click on the saved file after the download is complete. You will then be presented with the uninstall procedure. Please select the appropriate options from the presented screen to remove this.
Please note that you will continue to see the Fun Buddy Icons button on your browser until you close and reopen all instances of your Web browser
Umm... Im Really Sorry Too Say This... But If You Have Tried Virus Scanners And Fix Problem Editors Then I Think You Will Have To Pay For A Speicalist Computer Programer To Come Fix It Up... What They Do Is Pull Your Computer Apart And Reconnect It Or Something So That The Virus Is Erased From The Computer Memory... You Mite Find You Lose All Your Stuff Saved So You Mite Wanna Save Everything On A Floppy Or CD... If Possible...
I Also Advise You Go To A Computer Suppier That You Know Well... Otherwise They May Or May Not Put Even More Viruses In And Make You Pay Saying That They DID Fix It... When Honestly They Didnt...
I Hope I Have Helped You In Some Way...
If Anyone With More Knowledge Knows Anything Better Too Do... Please Say So... This Has Also Happened To Me Before... And I Find It Very Irritating... If You Have Something To Share... Than Do So... Its Not Fair To Others With The Problem...
Best Wishes...
Hope All Goes Well For You And Your Computer...
Sincerly...
AJ...
i have the msn virus that sends instant message automatically to my contact in msn messanger ,, the virus sends the URL that about Buddy ..could you kindly find away out to this problem ,, with thanks
http://www.happy-messaging.com/messenger/virus/
http://communities.microsoft.com/newsgroups/default.asp?icp=msn&slcid=US
click on msn.messenger
then click on NEW POST
and post ur question about msn messenger or hotmail and a techie will answer u in 2 hours. They do NOT email u the fix. They POST it in the newsgroup. so go back to the newsgroup in 2 HOURS and there'll be a reply.
Make sure u tell them exactly what ur problem is and ur operating system.
any1 know 2 get rid?
VIRUS
PROTECT
DESTROY
ANTI
NORTON
PANADA
SEEK
KILL
KILLER
SPY
TASK
AD
and much more. I have the list elsewhere but it's extremely long.
The worm closes any window that contains any of the following strings in their title:
ADWARE
ALERTS
ANTI
AUTOSTARTED
Avg
BENIGN
BLOCKER
BUG
BULLGUARD
BUSTER
CENTER
-CILLIN
CLEANER
CMD
Command
DESTROY
DETECTION
DOCTOR
EARTHLINK
EDITOR
ELIMINATE
EYE
FIGHT
Filter
FIREWALL
FIX
FIXING
HEAL
HELP
HUNTER
KERIO
Kill
LABS
LIVEUPDATE
MALWARE
MALWHERE
MCAFEE
NETCOP
NOD32
NORTON
PANDA
PROCESS!A
PROMPT
PROTECTOR
REGISTRY
REMOVAL
RESTORE
SANDBOX
SCAN
SECURE
SECURITY
SOPHOS
SPY
SPYBOT
SPYWARE
STOPPER
SWEEPER
TASK
TOOL
TREND
Update
VCATCH
VIRUS
WATCH
WORM
ADWARE
ALERTS
ANTI
AUTOSTARTED
Avg
BENIGN
BLOCKER
cos i think i have that virus a friend sent a link saying, 'lol look at this' & a link 'http://pj34r1ng.us/gallery.php?email=' with my email on it. i clicked on it and it had save or open. i clikd open and nothing happened.. n now i cant check my email or look at anyones 'my space' on msn or dl any antivirus scan. HELP!!
Posted by: Dave on March 20, 2005 02:23 AM
>>This was the only link that actually helped.
That pages links to this one..the page where you can download the program to delete the worm.
http://securityresponse.symantec.com/avcenter/venc/data/w32.bropia.removal.tool.html
Here is the solution,
DONT USE MICROSOFTS MSN MESSENGER PROGRAM
insted use GAIM
http://gaim.sourceforge.net/
it is a messenger program for linux, (and there is a windows version!), that supports all the different im porgrams out there, (inc. MSN, YAHOO, AIM etc)
you can download it from the link above and best of all
ITS FREE!!!
Can any one please help me i have got a virus and i dont know how 2 get rid of it, everytime i go on msn messenger it starts sendin 2 all my contacts..
I WOULD BE EVERY GRATE FULL FOR ANY HELP OT SUPORT.
THANKYOU
Amy
thanks
My msn messenger doesnt seem to let me sign in anymore. Every time i sign in it automatically closes and the icon on the bottom right of my screen is still there, but when i mouse over it disappears. I'd like to know how to fix this problem, and why its like that.
Thank you for your time and help.
I have the Larissa virus, fuckin n00b all that shit. I have attempted to remove the program several times. I had it before then a computer programmer wiped our computer and it was fine with msn 7.0. As soon as I downloaded msn 7.5 the problem started re-occuring when I try to log on I get the error code 80048883, and when I goto troubleshoot it says there is a problem with the key-ports. If anyone knows an approach to removing this virus please help. The links above I couldnt get to because it woudl shut down explorer everytime I clicked them.
Thanks,
Jordan
Hope someone figures this out.
I upgraded my 7.5 and the same problem like yours accured.
I reinstalled it without any luck, but I had the MSN 7.0 install file.
Now I've installed it and it works. So until Live messenger will come, maybe you should use 7.0 instead.
I hope I could help...
/Mike
I could login after downloaded back the old ver of 7.0 from MS HP as below.
http://www.microsoft.com/downloa ... b-b261-687e0082feb8
No matter how many times i unistall it and re install it it will give me the same error, and when i'm trying to type in my email adrees it gets stuck and minutes later it will let me write another part of the email..it takes so looong and then the error pops up. And it tells me that i am NOT connected to net passport wich is not true.
So MSN 7.0 here it comes!!
I will look for MSN 7.0 too now...
I'm soooo happy now, it means a lot since it became an important part of my job.
I Have the same problem as amy, and it just decides when it wants to work and when it don't
Wierd :S
Email me @ simonhurst200@hotmail.com
i'm flying in from LAX from China Eastern arriving at 6:30 pm and trying to make it to Wuhan the same day.
Seems like the last flight is a 8:20 flight from China Southern which the travel agent said is too risky.
My question is: how long does the shuttle take around that time?
say i board the shuttle at around 7pm...i believe it takes about 45 mins-an hour?
i'm just wondering if it's worth risking to try to catch it.
also, is there any other cities near Wuhan that any shanghai airlines might fly to that evening so i can take the bus? i know that's not likely since Wuhan is probably the only major city in that region with an airport.
heres the site to go 2 for details on how to fix your problem... i thought i'd betta post something on here because theres so many questions and not enough answers!! hahaha l8ers hope this helps i know how pissed off i was when my msn didnt work!!!!! if it still dont work.. use www.meebo.com its good to use until u fix ur msn!!
http://www.tech-recipes.com/windows_tips935.html
check it.. it works!
http://p1392.pic-myspace.info
Please tell me how to get rid of it, PLEASE!!!
my email:KL.C@TOM.COM
my email: mariakathia_cgs@yahoo.es
www.checkmessenger.net??
ash.summers@gmail.com
VIRUS
PROTECT
DESTROY
ANTI
NORTON
PANADA
SEEK
KILL
KILLER
SPY
TASK
AD
i was wandering if you could help me
i jst got a virus through msn as i stupidly opened a link that sum1 sent me saying
"hey is this a pic of u" and then a web address.. something like "www.sexypicsonline.com" or sumthing
its pretty similar to another virus i got a wile back wer it then automatically gets sent to all my contacts
i think the virus is
msnmsgr.exe or something
any idea of how to get rid of it??!?!?
is that u? :P http://www.modelpictures.info/index.php?pic2038.jpg
i would be very grateful if i would get a link to get rid of the virus ASAP as i dont want the wrom spreading thx alot =]
I am not responsible for any damage done to your computer by following these instructions. Editing the registry is serious stuff and you should only do it after making a restore point.
me and mi stupid fucking self clicked on dis viruz called
"holi shit fingy" and now its flashing convos where its sending that stupid
"holi shit thing" to other people
I NEED TO GET RID OF IT
help
help
help
PLEASE HELP X
Thanks.
HaN
My msn messenger doesnt seem to let me sign in anymore. Every time i sign in it automatically closes and the icon on the bottom right of my screen is still there, but when i mouse over it disappears. I'd like to know how to fix this problem, and why its like that.
I Have the same problem as amy, and it just decides when it wants to work and when it don't
Wierd :S
Email me @ simonhurst200@hotmail.com
Posted by: Simon on January 29, 2006 04:39 PM
@[fwpscript]Version:01.03.02.05|Icon:none|rsvp@[/fwpscript]
What is this and how do I get rid of it??????
i got error 8004888d coming up
HELP ME!
it goes to a site and it asked you to run and download somthing.
what is it and How can I get rid of it
cheers
Looking for a cost free solution. Thanks.
anyone knows how to solve this problem? really need helps.
i've had it for like 2 years now i'm sick of it how do i get rid of it.
if u know email me candy_gurl420@hotmail.com
Read it before you try it..
MSN Messenger virus:
1 - stop and unninstall msn messenger
2 - press CTRL+ALT+DEL -> stop all 'unknown' or 'weird' processes. If not sure, just type the name of the process on Google to know if it is a virus, adware or spyware
3 - Start -> Run -> msconfig -> startup -> uncheck all boxes without any name or description and other 'weird' processes. If not sure, check the path of the process and/or search on Google. Take note of the files and folders that you find out that belong to virus, etc. Press OK. This will keep unchecked processes from starting with Windows. Don't restart.
4 - donwload and run Eusing Registry Cleaner or other Registry Cleaner software. Delete all issues found.
5 - restart Windows in Safe-Mode (press F8 - I think..). If still present, delete the files and that you took note of in step 3
6 - restart Windows normally. A window will appear saying that some changes were made (on step 3). Uncheck the box and press OK
7- donwload and re-install msn messenger
ATTENTION:
- be carefull not to delete any 'good' file..if not sure, use Google :)
- this is what I do to deal with nasty spyware and adware that infect my computer. sometimes it's more difficult, requiring the download of special tools ,mostly available in antivirus software websites like Panda, Norton, etc..
Hope this helps ;)
if you can help please email at emo_z@hotmal.com
Thanks a lot for reading and trying to help ;)
Thank you, LOVE YOU ALL !
this girl came on and said "hey i did some work on some pictures in photoshop, have a look, do they look too green?" and then sent a zip/rar file. i accepted and opened.
now its doing it to everyone in my contacts list, without my knowledge or consent. how do i stop it?
but its using different "resons" like "i got banned from myspace because of this picture, have a look, it isnt that bad" or "im uploading pics to facebook, have a look" or "have a look at my holiday snaps".
please can anybody help.
email me if you can
Deanconnolly@hotmail.com
thanks
this girl came on and said "hey i did some work on some pictures in photoshop, have a look, do they look too green?" and then sent a zip/rar file. i accepted and opened.
now its doing it to everyone in my contacts list, without my knowledge or consent. how do i stop it?
please!!
this girl came on and said "hey i did some work on some pictures in photoshop, have a look, do they look too green?" and then sent a zip/rar file. i accepted and opened.
now its doing it to everyone in my contacts list, without my knowledge or consent. how do i stop it?
please!!
email me on gingeryob@hotmail.com
thank you
Thankkks.
is there anyway to get rid of it?
Please?
my msn wont let me sign on it keeps comin up with trouble shoot i click repairs and it aint work its like so so so annoying arrggghhh
plz help some1 out there must no the answer its somthin 2 do wiv firewall xoxox
And to the mac loser who has nothing to offer but telling us all, that he has no clue what is happening in the IT world: enjoy your mac.
If you look at the mac commercials, they are all losers!! Not geeks... And your comment fit right into place with the mac community.
Long live the Mac Takeover
the site is a MSN webmessenger which is the same as windows live messnger but in a web browser, I hope this fixes your problem
Help Me please.
By the way I have Vista.
For most of your MSN Problems, I'd suggest doing a ONLINE SCAN which this virus will hopefully not close.
Also you can try:
~If you bought your computer from a company like Dell, The warranty may come into effect with this.
~Try a System Repair installation (This will not destroy data)-On Yahoo! Questions by Me!!!--Link: http://answers.yahoo.com/question/index;_ylt=AmC4UvPEEND3XtwHjVEDm3nty6IX;_ylv=3?qid=20080312040916AAqmDpB&show=7#profile-info-jxdvS6YHaa
--- Just look at the "Best Answer" part,The instructions there are the same ones for Windows XP. This wil not work with Windows NT,2000,98 SE, 98,95 etc.
~If a System Repair Installation does not work back up valuable data and back it up onto CDs and DVDs then re-install Windows. Formatting your Hard Drive before a Clean re-install of windows would be best.
If anyone needs more help please Email me at rphchow@hotmail.com
If this helps it's no problem, I'm used to computer related issues.
If you are still having problems then feel free to add me on check9999mate@hotmail.com
and it sends pictures that have a virous in it PLEASE HELP !¬!!
I cant find it anywhere!! and i try to re-download it and it says its already on my computer.
Pleaseee help me!
Could you help me? :) x